Method and mechanism for providing computer programs with computer system events

ABSTRACT

A method and system for providing system event notifications to clients such as applications. Clients register for notification of one or more types of events with a registration mechanism, and a System Event Notification Service, (SENS), receives system event information and fires event notifications in response thereto. A distribution mechanism selectively communicates the fired event to each client registered for notification thereof based on the type of event. Events include network events, for which the service monitors the connectivity state of the machine, including whether a connection is established or lost, the type of connection (LAN/WAN) and bandwidth information. To monitor a LAN state, the service caches outgoing and incoming network information including errors and packet counts and statistically evaluates this cached information against current information to determine whether the connection is established or lost. The service also determines if a destination (IP address or name) is reachable, by periodically polling destinations. Other system event notifications may be fired, including logon or logoff operations and power management events.

TECHNICAL FIELD

The invention relates generally to computer systems, and moreparticularly to an improved method and mechanism for providing computerapplication programs with computer system events, including networkevents.

BACKGROUND OF THE INVENTION

At times, application programs need or could benefit from certain systemevent information. By way of example, an application program that dealswith a network may need to determine if the network is available to thatprogram, i.e., whether the computer system is connected to the networkand the network is operational. Another application program, such as aword processing program, may benefit from knowing if the state ofbattery charge was getting critically low, whereby the applicationprogram could automatically save a copy of any open files.

To the extent that such system information may be obtained, themechanisms for obtaining the information are independent within thevarious applications. For example, each application that deals with thenetwork essentially implements its own technology to determine the stateof network connectivity. Such technology uses often crude and incompleteheuristics for this purpose.

Moreover, because many system events such as battery low conditions andnetwork disconnects can happen at any time, some regular calling orpolling mechanism is generally needed to detect such conditions.However, such polling consumes resources, which is particularly wastefulsince the result is usually unchanged. At the same time, individualpolling is redundant. For example, if some system facility (such as anapplication programming interface, or API) reports the charge of thebattery, a word processor, spreadsheet and another application each maybe configured to separately and regularly poll the facility to determinethe charge.

Particular problems arise with mobile computing, since in mobilecomputing environments, users often change the state of networkconnectivity. At the same time, local area network (LAN) connectivity isparticularly difficult to detect, since there is not any uniform way todetermine the state of LAN connectivity, e.g., LAN cards do notadequately provide the needed connectivity information. Simplymonitoring for activity is not sufficient, since even if there isactivity on a LAN interface, such activity may be onlybroadcast/loopback activity, and not indicative of real networkconnectivity. In short, applications heretofore have not had anintegrated model for obtaining computer system event information,including network connectivity and other information.

SUMMARY OF THE INVENTION

Briefly, the present invention provides a method and system forproviding system event notifications to clients such as applications.Clients register for notification of one or more types of events with aregistration mechanism, and a System Event Notification Service, (SENS),receives system event information and fires events in response thereto.A distribution mechanism selectively communicates the fired event toeach client registered for notification thereof based on the type ofevent. SENS preferably uses the Loosely Coupled Events database to matchclient subscribers interested in the information SENS is capable ofpublishing.

For network events, the System Event Notification Service monitors theconnectivity state of the machine. SENS provides the connectivity stateinformation via an application programming interface (API) or by sendingnotifications to subscribers via the distribution mechanism. Theinformation may include whether the connection is established or lost,the type of connection (LAN/WAN) and bandwidth information. SENS alsoprovides information on other system events, including logon or logoffoperations and power management, and may be extended to provide othertypes of system event information such as notifications of plug and playoperations.

To monitor a LAN state, SENS caches outgoing and incoming networkinformation including errors and packet counts. SENS evaluates thiscached information against current information to determine whether theconnection is available or not and additionally to determine if aconnection was established or lost. SENS also evaluates the WAN state ifRAS (Remote Access Services) is installed. SENS further determines if adestination (IP address or name) is reachable, by periodically pollingdestinations, preferably via system threadpool timers. To monitor eventssuch as logon/logoff or power management, SENS registers with theoperating system. SENS may also interface with one or more other clientsto delay logging off until the other client or clients can completecertain work.

Other advantages will become apparent from the following detaileddescription when taken in conjunction with the drawings, in which:

BRIEF DESCRIPTION OF THE DRAWINGS

FIG. 1 is a block diagram representing a computer system into which thepresent invention may be incorporated;

FIG. 2 is a block diagram representing general components fordistributing system events to registered clients in accordance with oneaspect of the present invention;

FIG. 3 is a block diagram representing a centralized service andmechanism for firing event notifications, and interfaces in a clientregistered for notifications, in accordance with one aspect of thepresent invention;

FIG. 4 is a block diagram representing sources for triggering a networkconnectivity state evaluation and components therefor in accordance withone aspect of the present invention;

FIG. 5 is a representation of a cache for maintaining local area networkinformation to evaluate the network connectivity state in accordancewith one aspect of the present invention;

FIG. 6 is a flow diagram generally representing the steps taken toevaluate the connectivity state of a local area network and for firingcorresponding network system events in accordance with one aspect of thepresent invention;

FIG. 7 is a flow diagram generally representing the steps taken todetermine whether a specified network destination is reachable and forfiring corresponding network system events in accordance with one aspectof the present invention;

FIG. 8 is a representation of a cache for periodically polling networkdestinations to determine the reachability thereof; and

FIG. 9 is a representation of a thread pooling arrangement useful forperiodically polling network destinations to determine the reachabilitythereof.

DETAILED DESCRIPTION OF THE INVENTION

Exemplary Operating Environment

FIG. 1 and the following discussion are intended to provide a briefgeneral description of a suitable computing environment in which theinvention may be implemented. Although not required, the invention willbe described in the general context of computer-executable instructions,such as program modules, being executed by a personal computer.Generally, program modules include routines, programs, objects,components, data structures and the like that perform particular tasksor implement particular abstract data types. Moreover, those skilled inthe art will appreciate that the invention may be practiced with othercomputer system configurations, including hand-held devices,multi-processor systems, microprocessor-based or programmable consumerelectronics, network PCs, minicomputers, mainframe computers and thelike. The invention may also be practiced in distributed computingenvironments where tasks are performed by remote processing devices thatare linked through a communications network. In a distributed computingenvironment, program modules may be located in both local and remotememory storage devices.

With reference to FIG. 1, an exemplary system for implementing theinvention includes a general purpose computing device in the form of aconventional personal computer 20 or the like, including a processingunit 21, a system memory 22, and a system bus 23 that couples varioussystem components including the system memory to the processing unit 21.The system bus 23 may be any of several types of bus structuresincluding a memory bus or memory controller, a peripheral bus, and alocal bus using any of a variety of bus architectures. The system memoryincludes read-only memory (ROM) 24 and random access memory (RAM) 25. Abasic input/output system 26 (BIOS), containing the basic routines thathelp to transfer information between elements within the personalcomputer 20, such as during start-up, is stored in ROM 24. The personalcomputer 20 may further include a hard disk drive 27 for reading fromand writing to a hard disk, not shown, a magnetic disk drive 28 forreading from or writing to a removable magnetic disk 29, and an opticaldisk drive 30 for reading from or writing to a removable optical disk 31such as a CD-ROM or other optical media. The hard disk drive 27,magnetic disk drive 28, and optical disk drive 30 are connected to thesystem bus 23 by a hard disk drive interface 32, a magnetic disk driveinterface 33, and an optical drive interface 34, respectively. Thedrives and their associated computer-readable media provide non-volatilestorage of computer readable instructions, data structures, programmodules and other data for the personal computer 20. Although theexemplary environment described herein employs a hard disk, a removablemagnetic disk 29 and a removable optical disk 31, it should beappreciated by those skilled in the art that other types of computerreadable media which can store data that is accessible by a computer,such as magnetic cassettes, flash memory cards, digital video disks,Bernoulli cartridges, random access memories (RAMs), read-only memories(ROMs) and the like may also be used in the exemplary operatingenvironment.

A number of program modules may be stored on the hard disk, magneticdisk 29, optical disk 31, ROM 24 or RAM 25, including an operatingsystem 35 (preferably Windows® 2000), one or more application programs36, other program modules 37 and program data 38. A user may entercommands and information into the personal computer 20 through inputdevices such as a keyboard 40 and pointing device 42. Other inputdevices (not shown) may include a microphone, joystick, game pad,satellite dish, scanner or the like. These and other input devices areoften connected to the processing unit 21 through a serial portinterface 46 that is coupled to the system bus, but may be connected byother interfaces, such as a parallel port, game port or universal serialbus (USB). A monitor 47 or other type of display device is alsoconnected to the system bus 23 via an interface, such as a video adapter48. In addition to the monitor 47, personal computers typically includeother peripheral output devices (not shown), such as speakers andprinters.

The personal computer 20 may operate in a networked environment usinglogical connections to one or more remote computers, such as a remotecomputer 49. The remote computer 49 may be another personal computer, aserver, a router, a network PC, a peer device or other common networknode, and typically includes many or all of the elements described aboverelative to the personal computer 20, although only a memory storagedevice 50 has been illustrated in FIG. 1. The logical connectionsdepicted in FIG. 1 include a local area network (LAN) 51 and a wide areanetwork (WAN) 52. Such networking environments are commonplace inoffices, enterprise-wide computer networks, Intranets and the Internet.

When used in a LAN networking environment, the personal computer 20 isconnected to the local network 51 through a network interface or adapter53. When used in a WAN networking environment, the personal computer 20typically includes a modem 54 or other means for establishingcommunications over the wide area network 52, such as the Internet. Themodem 54, which may be internal or external, is connected to the systembus 23 via the serial port interface 46. In a networked environment,program modules depicted relative to the personal computer 20, orportions thereof, may be stored in the remote memory storage device. Itwill be appreciated that the network connections shown are exemplary andother means of establishing a communications link between the computersmay be used.

Event Notification

Turning now to FIG. 2, the System Event Notification Service 60 (SENS)is a centralized mechanism which publishes notifications to appropriateclients 62 ₁-62 _(n). Clients are subscribers that essentially subscribevia a registration mechanism 64 for events in which they are interested.When the SENS 60 receives system event information corresponding to anevent for which a client is registered, the SENS 60 fires an event to adistribution mechanism, preferably embodied in a COM object referred toas an event class object 66, which in turn publishes the event to onlythose client subscribers 62 ₁-62 _(n) that are registered for thatevent. A filtering mechanism 68 may also be included as part of theevent class object 66 or connected thereto, whereby certain events arefiltered out based on client-specified conditions (i.e., parameters)that may be associated with an event. For example, the client canregister for a notification of when the computer system is on batterypower, but further specify that notification should only occur if thebattery charge is at or below twenty percent. The filtering mechanismstops the fired event notification from reaching that client unless thebattery charge is below the specified twenty percent level.

Although not necessary to the present invention, the registrationmechanism 64, distribution mechanism (event class object) 66 andfiltering mechanism 68 used by the SENS 60 are preferably incorporatedinto a COM+ events database-like technology generally referred to hereinas the Loosely Coupled Events database 70. The Loosely Coupled Eventsdatabase 70 and associated filtering mechanism 68 are described in moredetail in copending United States patent applications, entitled “ObjectConnectivity Through Loosely Coupled Publish And Subscribe Events,” and“Object Connectivity Through Loosely Coupled Publish And SubscribeEvents With Filtering,” respectively, both assigned to the assignee ofthe present invention, filed concurrently herewith, and herebyincorporated by reference herein in their entireties. These applicationswill hereinafter be referred to as the aforementioned “Loosely CoupledEvents” applications.

Thus, aspects of the present invention are herein described withreference to the Loosely Coupled Events model, which is incorporatedinto an object services component of Microsoft Corporation's Windows®2000 (server) operating system. In general, the Windows® 2000 operatingsystem is a scaleable, high-performance network and computer operatingsystem supporting distributed client/server computing, and provides anobject execution environment for component applications, including thoseconforming to the component object model (COM). COM is described indetail in “Inside OLE, Second Edition”, Kraig Brockschmidt, MicrosoftPress (1995). The COM+ component incorporates object services thatimplement the illustrated publish and subscribe event communicationmodel. As used herein, “COM” is used to refer to the object modeldefined in the Microsoft Component Object Model, whereas “COM+” refersto the system services, system-provided objects and system-definedinterfaces of the COM+ object services component of Microsoft Windows®2000. Notwithstanding, there is no intention to limit the presentinvention to the Windows® 2000 operating system, COM and/or COM+, but onthe contrary, the present invention is intended to operate with andprovide benefits with any mechanism that fires and distributes eventnotifications in response to receiving system information. For example,the present invention has also been implemented in Microsoft®Corporation's Internet Explorer 5.0 for Windows NT 4.0 and Windows® 95and Windows® 98 operating systems.

The Loosely Coupled Events database 70 includes information about theevent publisher (i.e., SENS), event subscribers, and filters. Duringsetup, when Microsoft® Windows 2000® is installed or upgrades anotheroperating system, the SENS 60 adds itself as a publisher to a COM+Events data store, and provides information on the classes of eventsthat it monitors using a GUID for each class of events.

In the Loosely Coupled Events model, the SENS 60 is a publisher thatfires events to the distribution mechanism, the aforementioned COMobject referred to as the event class object 66. More particularly, theSENS 60 calls a method of an interface (e.g., 72 ₂) of the event classobject 66, which in turn handles the work of publishing the event to theclient subscribers 62 ₁-62 _(n) registered for the event. For purposesof simplicity herein, calling a method of a COM object will not bedescribed in detail, since such an operation is well documented. Thework performed by the event class object 66 includes retrievingsubscription information, creating the client subscriber (object) if notrunning, and multi-casting the event via method calls to the individualsubscribers.

More particularly, the event class object 66 (distribution mechanism)calls methods or APIs of the registration mechanism 64 (e.g., COM+Events subscription retrieval/enumeration APIs) when an event is “fired”by the SENS 60, so as to pass the event to the appropriate subscribersto the event. Note that the interfaces 72 _(l)-72 _(m) of the eventclass object 66 are ordinarily defined by the developer of the SENS 60publisher to handle the events fired thereby. Note further that theLoosely Coupled Events database 70 communicates with the SENS 60 so thatcertain types of events are not fired unless at least one client hasregistered for that type of event, since firing events can be costly interms of consuming system resources.

The SENS 60 is an event publisher for the classes of events that itmonitors, including network, logon, and power/battery events, and theclient application program receiving a notification is called an eventsubscriber, as described below. While the SENS 60 is primarily for localsystem events, the distributed component object model (DCOM) enables theSENS 60 to be extended to network clients.

The client subscribers 62 ₁-62 _(n) are also COM Objects in the LooselyCoupled Events model, each of which may have a subscription to a methodor methods of the interface 722. Application programs typically create asink object (FIG. 3) to receive appropriate notifications. Thesubscriptions cause the event class object 66 of the Loosely CoupledEvents database 70 to propagate events fired on the methods to thesubscribers, shown in FIG. 2 as 62 ₁-62 ₂, but not 62 _(n). To this end,the client subscribers 62 ₁-62 ₂ individually expose one or moreinterfaces, shown in FIG. 2 as the interfaces 74 _(l)-74 _(n). Each suchinterface is essentially defined identically to one of the interfaces 72_(l)-72 _(m). The event class object 66 propagates the event by callingthe method of each of the subscriber's interfaces (e.g., 74 ₁ and 74 ₂)that corresponds to the method called by the publisher in that eventclass object's interface (e.g., 72 ₂).

Note that an application (e.g., its sink object receiving thenotification) does not have to be active (running) when the notificationis sent. When an application subscribes to receive notifications, theapplication may specify whether it should be activated when the eventoccurs or notified later when it is active. The subscription can betransient and valid only until the application stops running, or it canbe persistent and valid until the application is removed from thesystem.

To selectively associate clients with events, the Loosely Coupled Eventsdatabase 70 includes subscription objects 76 _(l)-76 _(j). Each object(e.g. 76 ₂) associates a particular subscriber (e.g., client 62 ₁) and aparticular method of an event interface (e.g. 72 ₂) of a particularevent class object, (e.g., the event class object/SENS distributionmechanism 66). To create the subscription/association, the registrationmechanism 64 includes COM+ services in the form of methods or APIs thatcan be called to register, remove or modify subscriptions, (as well asto retrieve or enumerate subscriptions to a particular outgoing-eventinterface method). More particularly, each client subscribes to the SENSevents that interest it via IEventSubscription and IEventSysteminterfaces in the COM+ Events registration mechanism 64. An identifierfor the event classes is supplied, along with the SENS publisheridentifier, SENSGUID_PUBLISHER. Subscriptions are on a per-event level,whereby the subscribing application also specifies which events withinthe class are of interest thereto. As described above, each eventcorresponds to a method in the interface corresponding to its eventclass.

The client subscriber objects 62 ₁-62 _(n) may implement the code thatcalls the method or API of the registration mechanism 64 for registeringa subscription, so as to subscribe to a particular interface method.Alternatively, other programs may use the subscription registrationmethod or API of the registration mechanism 64 to enter a subscriptionfor a subscriber object. Accordingly, the clients 62 ₁-62 _(n) need notinclude code to register a subscription. Instead, subscriptions can beentered for the client subscriber object (e.g., 62 ₂) by other programs.For example, an installation program that is run at installation of thesubscriber object on the computer system 20 may enter a subscription, asmay other component programs of an application that incorporates thesubscriber object. Similarly, an administration utility such as“Microsoft Management Console,” may configure subscriptions for thesubscriber object. Additional details on publishers, the event classobject, subscribers, and subscriptions are set forth in theaforementioned “Loosely Coupled Events” patent applications.

Thus, the SENS 60 enables applications to receive notifications fromsystem events that SENS 60 monitors. When the requested event occurs,the SENS 60 notifies the application. At present, the SENS 60 can notifyapplications about three classes of system events, including TCP/IPnetwork events, such as the status of a TCP/IP network connection or thequality of the connection, user logon events, and battery and AC(alternating current) power events.

An application can subscribe to multiple system events, such asestablishment of network connectivity, notification when a specifieddestination can be reached within specified Quality of Connection (QOC)parameters, and when the computer has switched to battery power. Theapplication can also subscribed to be notified when the percentage ofremaining battery power is within a specified parameter, or when otherscheduled events occur.

In accordance with one aspect of the present invention, one way in whicha client (e.g., application) can determine network connectivityinformation is via application programming interfaces to the SENS 60,IsNetworkAlive( ) and IsDestinationReachable( ). The IsNetworkAlive( )function determines whether the local system is connected to a networkand the type of network connection, for example, LAN, WAN, or both. TheIsDestinationReachable( ) function determines if the specifieddestination can be reached, and provides Quality of Connection (QOC)information for the destination. Additional details are set forth below:Bool IsNetworkAlive(  LPDWORD lpdwFlags   // Specifies the type ofnetwork connection ); Parameters lpdwFlags Provides information on thetype of network connection available when the return value is TRUE.  Theflags can be: NETWORK_ALIVE_LAN the computer has one or more LAN cardsthat are active. NETWORK_ALIVE_WAN the computer has one or more activeRAS connections. Return Values TRUE The local system is connected to anetwork. FALSE Call GetLastError to determine the reason for noconnectivity. Remarks This function is used by applications that want toknow whether there is network connectivity before proceeding withnetwork operations. Applications such as directory service applications,e-mail clients, or Internet browsers can adapt to various kinds ofnetwork connectivity. For example, a printing operation can be deferreduntil the network connection is available. Note that at present, thisfunction is only available for TCP/IP connections. BoolIsDestinationReachable(  LPCSTR lpszDesination,  // Pointer to stringspecifying destination  LPQOCINFO lpQOCInfo // Pointer to Quality ofConnection information ); Parameters lpszDestination Pointer to a stringthat specifies the destination. The destination can be an IP address, aUNC name, or an URL. lpQOCInfo Pointer to the QOCINFO structure thatreceives the Quality of Connection (QOC) information. You can supply aNULL pointer if the QOC information is not desired. Return Values TRUEThe destination can be reached. FALSE Call GetLastError to determine thereason why the destination cannot be reached. Remarks This function isused by client applications to determine the QOC information beforeproceeding with network operations. For standalone computers that aredirectly connected to the network through a network card or remoteaccess server (RAS), this function generates minimal network trafficwith RPC calls to the nearest router. For computers that are part of anetwork where the destination can be reached using RAS or a networkgateway, this function pings to the destination to generate accurate QOCinformation. Note that at present, this function is only available forTCP/IP connections. The caller supplies the buffer for the QOCINFOstructure and must release this memory when it is no longer needed. TheQOCINFO structure is returned by the IsDestinationReachable function andprovides Quality of Connection information to the caller. typedef structtagQOCINFO {   DWORD   dwSize;   DWORD   dwFlags;   DWORD   dwInSpeed;  DWORD   dwOutSpeed; } QOCINFO, *LPQOCINFO; Members dwSize Upon callingthe IsDestinationReachable function, the caller supplies the size of theQOC structure in this member. On return from the function, this membercontains the actual size of the structure that was filled in. dwFlagsSpeed of connection. Flag bits indicate whether the connection is slow,medium, fast. dwInSpeed Speed of data coming in from the destination inbytes per second. dwOutSpeed    Speed of data sent to the destination inbytes per second.

In accordance with another aspect of the present invention, another wayin which a client (e.g., application) receives system events is bysubscribing a sink object 80 or the like for notifications of eventsthat interest it. As shown in FIG. 3, the subscriber application createsa sink object 80 with an implementation for each interface that ithandles. The various types of events are generally categorized intoappropriate interfaces, i.e., network-type events in one interface,power-type events in another interface, logon-type events in anotherinterface and so on. FIG. 3 shows such a client subscriber sink object80 set up to receive a relatively large number of SENS events, includingnetwork-type events via an ISensNetwork interface, power-type events viaan ISensOnNow interface and logon-type events via an ISensLogoninterface. Also, plug-and-play type events may be handled by the SENS60, and although not presently implemented, are shown herein toillustrate the extensibility of the present invention by simply addingadditional interfaces such as ISensPnP with appropriate methods. Ofcourse, a typical sink object ordinarily will not implement this manyevents, however FIG. 3 illustrates many of the possible events. The SENS60 predefines an outgoing interface for each event class in a typelibrary, as set forth in Table 1 below: TABLE 1 Event Class GUIDInterface Network SENSGUID_EVENTCLASS_NETWORK ISensNetwork events LogonSENSGUID_EVENTCLASS_LOGON ISensLogon events PowerSENSGUID_EVENTCLASS_ONNOW ISensOnNow events

The SENS 60 defines the SENS coclass as part of the SENS type library.The SENS object implementation is provided by the operating system, asset forth in Tables 2 and 3 below. TABLE 2 Creation/Access FunctionsCoCreateInstance Creates an instance of the SENS object using its CLSID.

TABLE 3 Interfaces ISensNetwork Default. Outgoing interface implementedby sink object in subscriber application. ISensOnNow Outgoing interfaceimplemented by sink object in subscriber application. ISensLogonOutgoing interface implemented by sink object in subscriber application.

The ISensNetwork interface handles network events fired by the SENS 60.Each event corresponds to a method in the ISensNetwork interface, anoutgoing interface defined by the SENS 60 and implemented by thesubscriber application as a dispatch interface. The following table,Table 4, sets forth the methods of the ISensNetwork interface thatcorrespond to network events: TABLE 4 ISensNetwork Methods DescriptionConnectionMade Specified connection has been established.ConnectionMadeNoQOCInfo Specified connection has been established withno Quality of Connection information available. ConnectionLost Specifiedconnection has been dropped. DestinationReachable Specified connectioncan be reached. DestinationReachableNoQ Specified connection can bereached with OCInfo no Quality of Connection information.

Additional details on some of the methods of the ISensNetwork interfaceare set forth below: ISensNetwork::ConnectionMade The specifiedconnection has been established. HRESULT ConnectionMade(  BSTRbstrConnection, // Connection name  ULONG ulType, // Connection type LPSENS_QOCINFO lpQOCInfo // Pointer to Quality of Connection  //information ); Parameters bstrConnection [in] The name of theconnection.  For WAN connections, the connection name is the name of thephone book entry; for LAN connections, it is the name of the networkcard. ulType [in] Connection type.  This value can be CONNECTION_LAN orCONNECTION_WAN. lpQOCInfo [out] Pointer to the SENS QOCINFO structurewhich contains Quality of Connection information. Dispatch Identifier[id(0x00000001)] Return Values S_OK Method returned successfully.Remarks - SENS calls this method to notify an application that thespecified connection has been established. SENS also provides a pointerto a structure containing Quality of Connection information. Note thatat present, this function is only available for TCP/IP connections.SENS_QOCINFO Structure The SENS_QOCINFO structure is provided by theISensNetwork::ConnectionMade method and theISensNetwork::DestinationReachable method. This structure containsQuality of Connection information to the sink object in an applicationthat subscribes to the System Event Notification Service (SENS). typedefstruct _SENS_QOCINFO {  DWORD dwSize;  DWORD dwFlags;  DWORD dwOutSpeed; DWORD dwInSpeed; } SENS_QOCINFO; Members dwSize This member containsthe actual size of the structure that was filled in. dwFlags Speed ofconnection. Flag bits indicate whether the connection is slow, medium,fast. dwOutSpeed Speed of data sent to the destination in bits persecond. dwInSpeed Speed of data coming in from the destination in bitsper second. ISensNetwork::DestinationReachable Directed to whether aspecified connection can be reached. HRESULT DestinationReachable(  BSTRbstrDesination, // Destination name  BSTR bstrConnection // Connectionname  ULONG ultype // Connection type  LPSENS_QOCINFO lpQOCInfo //Quality of Connection information ); Parameters bstrDestination [in]Name of the destination. The name may be an IP address, a URL, a UNC, ora NetBIOS name. bstrConnection [in] Name of the connection. For WANconnections, the connection name is the name of the phone book entry;for LAN connections, it is the name of the network card. ulType [in]Connection type. This value can be CONNECTION_LAN or CONNECTION_WAN.lpQOCInfo [out] Pointer to the SENS_QOCINFO structure which containsQuality of Connection information. Dispatch Identifier [id(0x00000004)]Return Values S_OK Method returned successfully. Remarks SENS calls thismethod to notify an application that the specified destination can bereached. A pointer to a structure containing Quality of Connectioninformation is also provided. Note that at present, this function isonly available for TCP/IP connections.ISensNetwork::DestinationReachableNoQOCInfo The specified connection canbe reached with no Quality of Connection information. HRESULTDestinationReachableNoQOCInfo(  BSTR bstrDesination, // Destination name BSTR bstrConnection, // Connection name  ULONG ultype // Connectiontype ); Parameters bstrDestination [in] The name of the destination. Canbe an IP address, a URL, a UNC, or a NetBIOS name. bstrConnection [in]Name of the connection. For WAN connections, the connection name is thename of the phone book entry; for LAN connections, it is the name of thenetwork card. ulType [in] Connection type. This value can beCONNECTION_LAN or CONNECTION_WAN. Dispatch Identifier [id(0x00000005)]Return Values S_OK Method returned successfully. Remarks SENS calls thismethod to notify an application that the specified destination can bereached when Quality of Connection information is not available. Notethat at present, this function is only available for TCP/IP connections.

Several types of applications, for example, can utilize the connectivityfunctions and notification services that the SENS 60 offers. Theseinclude an application that requires network connectivity status, suchas an application that utilizes directory services, or an applicationthat adapts its operations depending on the level of connectivity andthe quality of network services, such as an Internet browser thatfunctions at a reduced level on a low bandwidth connection. Otherapplications that may benefit from this information include anapplication that can perform deferred operations, such as an electronicmail program that can queue messages while offline and send them when aconnection is established.

Connectivity functions and notifications are also useful for certaincomputer configurations, such as a mobile computer used in a dockingstation on a high bandwidth network which may occasionally use a dial-inconnection, a mobile computer using a dial-in connection exclusively, adesktop computer using a dial-in connection exclusively or a desktopcomputer connected to a high bandwidth network with latency issues. Ineach of these configurations, the connection bandwidth and latencyinformation can be used by an application to dynamically optimize itsoperations for network availability.

As described above, LAN cards in general do not provide the appropriateLAN connectivity information needed to appropriately fire system eventsrelated thereto. However, in accordance with one aspect of the presentinvention, the SENS 60 provides a mechanism for detecting the networkconnectivity state, so that it can appropriately fire events in responseto state changes. To this end, as shown in FIGS. 4 and 5, the SENS 60caches network information in time-based caches 82 _(T0) and 82 _(T2).The cached information includes Unicast and non-Unicast incoming andoutgoing network packet counts and incoming and outgoing error counts.These counts start at zero when the machine is last rebooted, and neverdecrease (until the next reboot). For each interface, this informationis maintained as part of a TCP/IP stack 84 and made accessible throughInternet Protocol Help (IPHLP) APIs 86. As described below, a snapshotis taken of the network information at two distinct times to fill theLAN caches 82 _(T0) and 82 _(T2), and the differences in countsevaluated by an evaluation mechanism 88 within the SENS 60 to determinenetwork connectivity, i.e., whether the network is alive (true) or not(false).

FIG. 6 shows the general process for determining network connectivity,beginning at step 600. One way to trigger the steps of FIG. 6 is when anapplication program 90 (FIG. 4) or the like calls the above-describedIsNetworkAlive( ) API 91, requesting the network connectivity stateinformation. Also, the SENS 60 can periodically check the state (e.g.,once every two minutes) and appropriately fire events on state changesto registered clients. Certain other activities can also trigger theevaluation of network connectivity, as represented in FIG. 4 by ovals92-95. These include plug and play events 92 directed to a LAN card,since plugging or unplugging such a card is likely to change the stateof network connectivity. Similarly, certain network user interfaceactivity 93, wherein a user can specifically ask to change the networkconnectivity state, may trigger a reevaluation. Remote Access Services(RAS) events 94 and Media Sense activity 95 can also trigger areevaluation of network connectivity. Note that RAS may directly provideevent information indicating whether a WAN connection is alive, whichthe SENS 60 then utilizes to fire events. Further, note that these otherevents essentially enter the reevaluation process at step 606, while theAPI call initially evaluates the last state by entering the process atstep 600. Thus, when an API calls triggers the reevaluation, as anoptimization, the network connectivity is not checked if it is alive(true) and has been checked recently, since networks do not fail oftenand evaluating the network information is relatively expensive. However,the network information is evaluated if false, or if one of the certaincircumstances (described above) has taken place, since those events tendto happen when the network connectivity state changes, regardless ofwhen last checked.

If during the IsNetworkAlive( ) API call the network state was lastdetermined to be true, step 600 branches to step 602 to test if the timeduration, i.e., the current time minus the previous time T₀, presentlyselected in one embodiment at 180 seconds, has been achieved since thelast time connectivity was evaluated. If the duration is less than athreshold time, i.e., T₁<T₀+180, it is not yet time to check, wherebystep 602 branches to step 604 where a “True” network state is returned.Alternatively, as shown in FIG. 6, if the network state is “False” (step600) or if the time to check has been achieved (T₂>=T₀+180) at step 602,step 606 is next executed to fill a time-based cache 82 _(T2) withnetwork information at the current time, T₂. Note that the first time,(since reboot), the state is assumed to be false, whereby an evaluationof the network information will take place.

As described above and as represented in FIG. 5, each cache (e.g., 82_(T2)) includes various packet and error counts. At step 606, thecurrent cache 82 _(T2) is evaluated against a previous cache 82 _(T0)having the same count information therein, although current interfacesmay have been added or removed since the time To. Note that if the cache82 _(T0) at time T₀ is too old or suspect, i.e., few if any of theinterfaces are the same, the previous cache 82 _(T0) can be scrapped,the current cache 82 _(T2) can become the previous cache 82 _(T0), andafter (possibly) a short delay, new current counts can be obtained whichbecome the values in the current cache 82 _(T2). In any event, thevalues cached in the cache 82 _(T2) are statistically evaluated againstthose in the cache 82 _(T1) to determine if the network connectivity haschanged.

In general, if an incoming packet count has increased from time T₂ toT₀, and the errors are low, the network is alive, to a high degree ofcertainty. Conversely, if the outgoing packet counts have increased butthe corresponding incoming counts have not relatively increased, thenetwork is likely not alive. For example, to determine networkconnectivity, if unicastIN and unicastOUT have changed, the network isconsidered to be alive. Also, if unicastIN and unicastOUT have both notchanged, AND broadcastIN and non-unicastOUT have changed by differentamounts, the network is considered to be alive. However, if broadcastINand non-unicastOUT have changed by the same amounts, it is justbroadcast activity (e.g., the network tap has probably been pulled out),whereby the network is considered to be not alive. Moreover, if theErrors IN/OUT or discards IN/OUT have changed, the network is mostlikely alive and is thus considered as such.

Once the state is determined, in the API call step 610 is executed topreturn the state as a result to the calling application. Step 612 isthen executed to determine if the state has changed from its previoustrue or false value. If the state has changed, the SENS 60 fires theevent, Network Alive (if True) or Network Not Alive (if false), toprovide the current state via the Loosely Coupled Events database 70 tothe clients registered therefor. Lastly, at step 616, this current stateis maintained as the previous state and the current cache as theprevious cache to be available for the next evaluation.

In accordance with another aspect of the present invention, the SENS 60also provides an event and/or API response as to whether a particularnetwork destination is reachable. Applications can call theIsDestinationReachable( ) API or register for DestinationReachablechange events. By way of example, rather than simply knowing whether thenetwork is alive, an electronic mail program may want to know whetherits mail server is reachable. To this end, the electronic mail programcalls the IsDestinationReachable( ) API or registers (typically atinstallation time) with the Loosely Coupled Events database 70 for“DestinationReachable” notifications, and provides the name of the mailserver. The Loosely Coupled Events database 70 then informs the SENS 60,whereby the SENS 60 will find out and thereafter monitor thisdestination. The SENS 60 then fires events when the state of the mailserver switches from reachable to not reachable and vice-versa.

To determine destination reachability, the SENS 60 essentially executesthe steps of FIG. 7, beginning at step 700 where a test is made as towhether the destination is named or is in the form of an IP address. Ifnamed, the SENS 60 attempts to resolve the name, i.e., by callingexternal TCP/IP name resolution APIs, and obtaining a result at step702. If unable to be resolved, step 704 branches to step 706 where the“not reachable” result is returned to the calling program (if called asan API). A “Ping” cache 98 (FIG. 8) is updated at step 708 to reflectthe unreachable state before branching to step 716, described below.

If the IP address is known, either at step 700 or via steps 702-704,step 710 then tests to determine if the IP address corresponds to alocal subnet (known from the value of the address). If so, then thedestination is automatically considered reachable, and the reachableresult is returned to the calling program (if called as an API) beforebranching to step 716, described below. Note that when a destination isconsidered reachable by the SENS 60, it is not a guarantee ofreachability to an application. However local subnets are worth trying,and thus a “reachable” result is returned.

If the IP address does not correspond to a local Subnet, at step 710,the destination may be pinged (i.e., a packet sent thereto) to see if itresponds, whereby it is known whether it is reachable. However, ratherthan ping each time, the ping cache 98 may be maintained that keeps thereachable/unreachable states of one or more destinations therein. Theping cache 98 is regularly updated while the network is alive, forexample, each destination in the ping cache 98 is pinged once every fiveminutes. The last pinged state for the appropriate destination isreturned at step 714 to the application calling the API, although as canbe appreciated, alternatively the API call can force the ping.

Steps 716 and 718 cause an event to be fired to registered clients if astate change has occurred. For example, a name that previously was notresolvable is now resolved and it is in the local Subnet, or nowresponds when pinged, or a destination that formerly responded to pingsno longer responds. Note that as also represented in FIG. 7, the ongoingmonitoring process of the SENS 60 essentially pings each registereddestination on a regular basis and then performs the steps 716-718 todetermine whether to fire an event.

A simple way in which to ping destinations is to keep a list ofdestinations and their corresponding reachable or unreachable states inthe ping cache 98 as shown in FIG. 8. Then, a thread unblocks andexecutes once every time period (e.g., five minutes), and loops throughthe list by pulling each destination off of the list and essentiallyexecuting the steps of FIG. 7 therefor, writing any changed result intothe ping table 98. The thread then blocks until again needed.

However, while effective, the simple looping mechanism wastes a threadsince most of the time the thread is idle while blocking. A moreefficient way to perform the same pinging loop is to use thread pooling.In thread pooling, each executable is assigned a number of threads 100₁-100 _(k), (e.g., three or four), plus a single thread (DLL) 102 whichmaintains a timer queue 104 of timed work items, one-time queued workitems, and/or wait-based work items that wait on an event. At present,this provides the ability to wait on sixty-two objects with one thread102. The SENS 60, using thread-pooling APIs 106, registers eachdestination to ping as a work item 102 _(l)-102 i with the operatingsystem, along with any wait-based work items such as RAS connect anddisconnect. The single thread 102 allocates one or more worker threads(e.g., 100 _(l)) to work items 102 _(l)-102 i in the queue 104 asappropriate, i.e., once every time period for ping work items, wherebythe pinging operation takes place. When not pinging, threads may be thusallocated to other processes rather than blocking.

In accordance with another aspect of the present invention, the SENS 60provides notifications of AC and battery power events reported by theoperating system 35. The ISensOnNow interface is implemented by clientsinterested in any of the SENS power events. As described above, thisinterface is an outgoing interface defined by SENS and implemented bythe subscriber application as a dispatch interface. As also describedabove, when registering for battery low notifications, clients canspecify filtering information. Each SENS power event corresponds to amethod in the ISensOnNow interface, set forth below in Table 5: TABLE 5ISensOnNow Methods Description OnACPower Switched to AC power.OnBatteryPower Switched to Battery power. BatteryLow Battery power islow.

Additional details for some of the methods of the ISensOnNow interfaceare set forth below: ISensOnNow::OnACPower SENS calls this method tonotify your application that the computer is using AC power. HRESULTOnACPower(void); Dispatch Identifier [id(0x00000001)] Return Values S_OKMethod returned successfully. Remarks SENS calls this method to notifyan application that AC power has been activated.  If an applicationsubscribes to this event, there are no filters to specify.ISensOnNow::OnBatteryPower SENS calls this method to notify anapplication that the computer is using battery power. HRESULTOnBatteryPower(  DWORD dwBatteryLifePercent  // Percent of battery powerremaining ); Parameters dwBatteryLifePercent [in] Specifies the percentof battery power remaining. Dispatch Identifier [id(0x00000002)] ReturnValues S OK Method returned successfully. Remarks SENS calls this methodto notify an application that the computer is using battery power. Theremaining percentage of battery power is specified. If an applicationsubscribes to this event, there are no filters to specify.

The SENS 60 also handles additional notifications related to varioussystem states via the ISensLogon interface. If any clients areinterested, the SENS 60 centrally registers to find out about theseevents with the operating system/Winlogon service. The clientapplication registers for these notifications and implements thisISensLogon interface as described above, whereby the SENS 60, via theLoosely Coupled Events database 70, calls the ISensLogon methods on theappropriately registered sink object to fire the corresponding event.The following table, Table 6, describes these events: TABLE 6 ISensLogonMethods Description Logon A user has logged on. Logoff A user has loggedoff. StartShell Shell has been started. DisplayLock Screen display hasbeen locked. DisplayUnlock Screen display has been unlocked.StartScreenSaver Screen saver has been started. StopScreenSaver Screensaver has been stopped.

Lastly, the SENS 60 provides a special facility that may be used justbefore logoff, such as for synchronization purposes. As with logon, theSENS 60 registers with the operating system for certain eventnotifications. However, rather than after the event starts, when theSENS 60 receives the logoff indication, the SENS 60 fires a logoff event(if a client is registered for notification) and then delays the logoffprocess until a client that has registered for logoff notificationinstructs the SENS 60 to continue. This allows a client to performpre-logoff processing after the user has requested logoff but before theactual logoff operation occurs.

As can be seen from the foregoing detailed description, there isprovided a centralized system event notification service that notifiesregistered clients of events. The method and system provide informationsuch as network information that is otherwise unavailable orinconsistent in a consistent, efficient and extensible way.

While the invention is susceptible to various modifications andalternative constructions, a certain illustrated embodiment thereof isshown in the drawings and has been described above in detail. It shouldbe understood, however, that there is no intention to limit theinvention to the specific form or forms disclosed, but on the contrary,the intention is to cover all modifications, alternative constructions,and equivalents falling within the spirit and scope of the invention.

1. A system for providing notifications of computer system events toclients, comprising, a central service configured to monitor for systemevents including at least one system event corresponding to whethernetwork connectivity has changed state and to fire at least one eventnotification in response thereto, including at least one eventnotification when a network connection is established, a registrationmechanism for clients to register for notification of one or more typesof events, including at least one client registered for networkconnectivity event notification, and a distribution mechanism thatcommunicates the fired at least one event notification to each clientregistered for notification thereof based on the type of eventnotification, wherein the client registers for notification for a typeof event with the registration mechanism and includes conditioninformation therewith, the condition information specifying at least onefurther condition that is met before notification of an event of thetype registered is communicated to the client, and the distributionmechanism includes a filtering mechanism for selectively communicatingan event notification based on at least one condition.
 2. The system ofclaim 1 wherein the registration mechanism and distribution mechanismare incorporated in a loosely coupled events database including an eventclass object, and wherein the central service is a publisher and eachclient is a subscriber.
 3. The system of claim 1 wherein thenotification includes activating, starting or running a program orscript.
 4. The system of claim 1 wherein the central service receives atleast some of the system events from an operating system.
 5. The systemof claim 1 wherein the system event includes information related to thepower state of the machine.
 6. The system of claim 1 wherein the systemevent includes information related to the logon state of the machine. 7.The system of claim 1 wherein the central service receives system eventinformation related to a network.
 8. A computer-readable medium havingcomputer-executable instructions for performing steps comprising: a)receiving system information at a central service; b) publishing anevent notification in response thereto, the event notification having anevent type associated therewith; c) receiving the event notification atan event class object of a loosely coupled events database; d) matchingthe event notification with at least one client that has subscribed forevent notification based on the type of event; and e) communicating theevent notification to each client that has subscribed therefor.
 9. Thecomputer-readable medium of claim 8 having further computer-executableinstructions for performing the step of, filtering event notificationsby selectively communicating event notifications based on at least onecondition.
 10. The computer-readable medium of claim 8 wherein thecentral service receives the system information as system events from anoperating system.
 11. The computer-readable medium of claim 8 whereinthe system information includes information related to a network state.12. The computer-readable medium of claim 11 wherein the network is awide area network, and wherein the step of receiving system informationat a central service comprises the step of receiving remote accessservices events.
 13. The computer-readable medium of claim 11 whereinthe network is a local area network, and having furthercomputer-executable instructions for performing the step of cachingnetwork information corresponding to activity on the local area network.14. The computer-readable medium of claim 13 having furthercomputer-executable instructions for performing the step of evaluatingcached network information to determine the state of networkconnectivity.
 15. The computer-readable medium of claim 14 wherein thecentral service publishes an event when the state of networkconnectivity has changed from a previous value thereof.